Discuss IAPP CIPP/A Exam Topic 1 Question 12

In what case would a foreign company NOT be liable for breaches of Singapore's PDPA?

AIf it has a physical office in Singapore.

BIf it is storing information in Singapore.

CIf it is collecting personal information in Singapore.

DIf it collects information from Singaporeans living abroad.

Suggested Answer: D

Get Premium CIPP/A Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Maurine 1 year ago

I disagree, they should be liable regardless of location!

Marion 1 year ago

A and B don’t matter if they’re not in Singapore.

Heike 1 year ago

Surprised that a foreign company can avoid liability at all!

Marisha 1 year ago

No way, it’s definitely C!

Hayley 1 year ago

I think it's D, right?

Rosann 1 year ago

I remember discussing how the PDPA applies to foreign companies, but I can't recall if storing data in Singapore makes them liable. I need to think more about B.

Quiana 1 year ago

I’m a bit confused. I thought that if a company collects personal data in Singapore, they would definitely be liable, which makes me lean towards D.

Gwen 1 year ago

I feel like I studied a similar question, and it was about the jurisdiction of the PDPA. I think if they have a physical office, they might be liable, so maybe it's not A.

Gladys 1 year ago

I think the answer might be D, but I'm not entirely sure. I remember something about how the PDPA applies to local data collection.

Carma 1 year ago

I've used the RSA Archer solution before, and I'm pretty confident it's for FISMA compliance. That's the main regulation it's designed to help organizations meet.

Leota 1 year ago

I feel like I've seen these constructs before in my VMware Cloud Director training, but I'm having a hard time remembering the exact details. I'll have to use the process of elimination to try to narrow it down.

Lawana 1 year ago

I'm a bit confused by this question. The data seems straightforward, but I'm not sure how to properly calculate the related party disclosures. I'll need to review the relevant accounting standards to make sure I'm approaching this correctly.

Latrice 1 year ago

I think this question is testing our understanding of how MFA (multi-factor authentication) works. If MFA is enabled on the user's system but not the user account, the user should still be prompted for MFA on their system, so I'll go with option A.

IAPP CIPP/A Exam - Topic 1 Question 12 Discussion